scripts/function/permission/libreportal_folders.sh

@@ -22,10 +22,8 @@ reconcileDockerOwnership()
     local mode="${1:-$CFG_DOCKER_INSTALL_TYPE}"
     [[ -d "$docker_dir" ]] || return 0
 
-    # The control plane is owned by the MANAGER user in BOTH modes. root:root was
-    # never the intended model — it only ever showed up as an artifact of
-    # un-de-sudo'd commands (sudo creating files as root instead of libreportal).
-    local owner="$sudo_user_name"
+    local owner="root"
+    [[ "$mode" == "rootless" ]] && owner="$sudo_user_name"
 
     # Swap ONLY the owner on our own control-plane files; never reset mode bits
     # (so nothing that validates its permissions gets surprised). The only two